Novell ACCESS MANAGER 3.1 SP1 - IDENTITY SERVER Manual page 170

Configuring Windows Clients for CardSpace
Windows clients require the Microsoft .NET Framework 3.5 service pack, and Internet Explorer
needs to be configured to trust the identity providers that supply managed cards.
1 (Conditional) Install the Microsoft .NET Framework 3.5 service pack.
For Vista clients, this is included with the operating system.
For XP clients, you need to download and install it.
1a Download the package. See
downloads/details.aspx?FamilyId=333325FD-AE52-4E35-B531-
508D977D32A6&displaylang=en)
1b Install the package.
1c To verify that it has been installed, click Control Panel > Add and Remove Programs, then
search for a Microsoft .NET Framework 3.5 entry.
2 (Conditional) Install the trusted root certificate of the Identity Server CA so that Internet
Explorer trusts the Identity Server. If you are using Access Manager generated certificates, you
need to complete these steps.
You must be an administrator user to complete these steps.
2a In Internet Explorer, enter the base URL of the Identity Server.
2b Click Continue to this website.
2c In the URL line, click Certificate Error > View Certificates.
The Certificate Information page displays information about the Identity Server server
certificate.
2d Click Certification Path, select the root CA certificate, then click View Certificate.
The Certificate Information page displays information about the root CA certificate.
2e Click Install Certificate > Next.
2f Select Place all certificates in the following store, then click Browse.
2g Select to Show physical stores, scroll to the Trusted Root Certification Authorities, open it,
select Local Computer, then click OK.
2h Click Next > Finish > OK.
2i Close the browser.
2j To verify that the correct certificate was installed, open the browser, then enter the base
URL of the Identity Server.
The certificate error should not appear in the URL line.
Configuring Linux Clients for CardSpace
The following instructions are for Linux clients running SUSE
®
DigitalMe
the Identity Server.
1 Verify that you have updated Firefox to 2.x. DigitalMe does not work with Firefox 1.5.x.
2 In Firefox, access the Bandit Card site by entering the following URL:
http://cards.bandit-project.org
170 Novell Access Manager 3.1 SP1 Identity Server Guide
card selector and explain how to download it, install it, and configure it so that it trusts
Microsoft .NET Framework 3.5 (http://www.microsoft.com/
®
Linux 10. They use the Bandit
TM